Program Manager : Security Analysis Sr. Specialist Advisor

Req ID:
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward:thinking organization, apply now.
We are currently seeking a Program manager : Security Analysis Sr. Specialist Advisor to join our team in Noida, Uttar Pradesh (IN:UP), India (IN).
Information Security GRC Program Manager responsibilities
include:
Program Leadership and Strategy
:
Evaluate, interpret, and ensure clarity of audit, compliance, and risk obligations and objectives.
:
Develop and manage the comprehensive GRC Program, integrating and leading Audit and Compliance, TPRM, and Cybersecurity Risk to ensure delivery of a cohesive GRC Program.
:
Collaborate with Senior Leadership to align GRC initiatives with organizational objectives.
:
Support implementation of GRC frameworks, policies, and best practices.
:
Establish strategic partnerships and cross:organizational relationships with control owners, second line:of:defense, Enterprise Risk, privacy leaders, and others to enable GRC program effectiveness.
:
Develop GRC Program Roadmap highlighting opportunities and recommendations for continuous GRC Program improvement.
Audit and Compliance:
stylemargin:bottom:13.0px:
:
Maintain awareness of the annual internal audit plan.
:
Drive the collection and management of audit evidence ensuring adherence to regulatory requirements for internal and external inspection: SOX, PCI, GDPR, CCPA, and other frameworks.
:
Participate in audit lifecycle engagement with auditor(s) to address scope creep, unwarranted audit findings, and other issues or escalations.
:
Drive remediation of audit findings and provide guidance related to development of a formal management response, remediation plan approval, control validation, and closure of findings.
:
Escalation point:of:contact for Audit and Compliance service.
Risk Management
:
Drive Cybersecurity Risk Assessment and Remediation Support ensuring that risk mitigation measures are effectively implemented and monitored.
:
Ensure cross:functional collaboration to address identified control gaps or weaknesses.
:
Provide oversight related to automated Third:Party Risk Management (TPRM) function, ensuring the identification, assessment, and mitigation of risks associated with vendors.
:
Escalation point:of:contact for Risk Management service.
Governance
:
Develop and present executive:level reports, dashboards, metrics that provide insights related to audit and compliance, risk posture, GRC Program effectiveness, and progress toward initiatives.
:
Promote strong governance practices.
:
Understand, drive implementation, and/or alignment to control procedures; ensure compliance with all applicable policies, regulatory requirements, and standards.
:
Monitor changes in Security, Regulatory, and Privacy requirements; provide guidance related to such changes.
Required Skills and Experience:
stylemargin:bottom:13.0px:
:
Bachelor 's degree: Cybersecurity, Information Technology, Risk Management, or related field
:
One or more professional certifications: CISA, CISSP, CRISC, CISM, CGEIT,
or equivalent
:
7 years in a Cybersecurity, GRC, or IT Risk Management role, with at least 3 years in a program management capacity
:
One or more professional certifications: CISSP, CISA, CRISC, PCI QSA, CISM,
or equivalent
:
Effective communication, presentation, interpersonal relationship building, and business acumen
:
Strong understanding and application of risk management frameworks and security/regulatory control frameworks including SOX, PCI:DSS, GDPR, NIST 800:53, NIST CSF, NIST RMF, NIS2 and similar frameworks
:
Proven ability to manage complex large:scale projects
:
Strong leadership, problem:solving, and decision:making abilities.
:
Attention to detail and ability to work independently and collaboratively
:
Job Type: Permanent